stripe

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages Stripe account reads and scheduled subscription cancellations (setting cancel_at_period_end=true). Subscription cancellation modifies billing state, which constitutes an indirect financial operation (updating subscription billing terms for downstream handling rather than immediate transfer or charge). Independent access control is enforced via Stripe API authentication keys (STRIPE_API_KEY, secret/restricted keys) and CLI execution checks.